Joao Ferreira

I've built practical cybersecurity infrastructure spanning SIEM training labs, IoT connectivity, and attack simulations. At IEETA, I developed infrastructure for practical SIEM fundamentals sessions using Splunk, Elastic, virtual machines, containers, and Moodle/eLearning platforms.

For PHBP - Cybersecurity & IoT, I designed a secure Docker-based WireGuard VPN infrastructure connecting real and simulated IoT devices to a central network. I also developed a Python orchestrator for dynamic peer registration, automated key exchange, and IP allocation, alongside an Nginx reverse proxy for remote monitoring and service routing.

My security training through TryHackMe has focused on log analysis, alert investigation, incident detection and response, threat intelligence, IOC analysis, OSINT, basic malware analysis, and mapping adversary techniques with MITRE ATT&CK.

I've also developed Python, Flask, and Docker backend and frontend components at Magnum Cap, including REST APIs and data-visualization interfaces. My projects include a Splunk home lab ingesting Windows Sysmon telemetry and an isolated Active Directory environment for security auditing.